[Geoserver-devel] Layer group in workspace referencing other workspaces

Hello,

I read in org.geoserver.catalog.impl.CatalogImpl that a check is done to assert that a layer group having a workspace doesn’t references layers or styles sitting in another workspace.
Otherwise GeoServer throws an error like:

java.lang.IllegalArgumentException: Layer group within a workspace (workspaceA) can not contain resources from other workspace: workspaceB

What is the reason behind this check? Does it have to do with some security / access control?
I find this limitation quite problematic and I was wondering how we could improve that.
What about adding an (global? per layergroup?) option where this check would be skipped altogether?
Or maybe things are not simple and that would break something else in GeoServer?

Thanks,

Damiano Albani
Geodan

On Fri, Sep 2, 2016 at 11:59 AM, Damiano Albani <damiano.albani@anonymised.com>
wrote:

Or maybe things are not simple and that would break something else in
GeoServer?

It would make workspace specific services stop working, only the global
ones could operate (the ws specific one filter the catalog to only make
what's in the current workspace available).
However, only global services can be turned off, the ws specific ones
cannot.
If you want to refer to other workspaces, the layer group should be global,
changing that might prove to be difficult (or could make the code quite
complicated).... not saying it
cannot be done, but it certainly requires more investigation

Cheers
Andrea

--

GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.

-------------------------------------------------------